Software

Chinese Fire Ant hackers turn Cisco routers into spying platforms

The researchers discovered Fire Ant’s new tactic after finding an active GRE (Generic Routing Encapsulation) tunnel interface on a Cisco IOS XR router that could not be explained by a running configuration or commit history. According to incident response company Sygnia, the threat actor switched from targeting VMware hypervisors to compromising Cisco routers, TACACS authentication […]

Chinese Fire Ant hackers turn Cisco routers into spying platforms Read More »

Microsoft warns of TerminalFix attacks deploying reverse tunnels

A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into executing malicious PowerShell commands in Windows Terminal. Unlike typical ClickFix attacks that often lead to infostealer malware infections, this campaign uses a multi-stage intrusion chain that ultimately gives attackers a reverse tunnel into the victim’s internal network.

Microsoft warns of TerminalFix attacks deploying reverse tunnels Read More »

Cronos blockchain restarts after $74 million Tectonic exploit

The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending platform allowed an attacker to borrow $74 million. According to current information, the threat actor artificially inflated the price of Tectonic’s TONIC token by 100 times, then used it as collateral to borrow real assets. The price manipulation

Cronos blockchain restarts after $74 million Tectonic exploit Read More »

Berlin confirms data theft after Rhysida ransomware attack claims

Berlin’s city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang listed it on their data leak site. The attack was discovered in mid-August, and the threat actor claimed it publicly last Friday, on August 28. Kai Wergner, the Mayor of Berlin, stated that the city will not

Berlin confirms data theft after Rhysida ransomware attack claims Read More »

Microsoft says Windows 11 KB5120998 update resets mouse settings

Microsoft has confirmed that the KB5120998 August 2026 non-security preview update is reverting mouse settings on Windows 11 systems. According to user reports, mouse cursor personalization settings are either being changed or reset automatically after installing the KB5120998 update. More importantly, affected Windows 11 users will not be able to restore the previous mouse settings

Microsoft says Windows 11 KB5120998 update resets mouse settings Read More »

Nigerians extradited to US for sextortion, deaths of two teens

Two Nigerian men extradited to the U.S. on Thursday have been charged with involvement in sextortion schemes that resulted in the deaths of two minor victims in Mississippi and North Carolina. Sextortion is a form of online blackmail in which cybercriminals threaten victims with leaking nude images and videos they stole (through hacking) or obtained

Nigerians extradited to US for sextortion, deaths of two teens Read More »

McKesson discloses breach after ShinyHunters claims patient data theft

Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records. McKesson is a major U.S. healthcare company and pharmaceutical distributor that provides medicines, medical supplies, technology, and services to healthcare providers and

McKesson discloses breach after ShinyHunters claims patient data theft Read More »

Brave browser adds email aliases to help users evade tracking

The latest version of the Brave browser, 1.94, introduces a feature called ‘Email Aliases’ that allows users to generate disposable email addresses when signing up to a new service. Using an alias address keeps the user’s real email address hidden from the website while still forwarding messages from the service. Brave already uses data isolation

Brave browser adds email aliases to help users evade tracking Read More »

Chrome Web Store extensions caught stealing crypto, browser data

Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, and to inject ClickFix lures. Researchers say all 19 malicious modules uncovered in the campaign serve distinct purposes and are designed to be “highly extensible.” The operation was uncovered by application security

Chrome Web Store extensions caught stealing crypto, browser data Read More »

FulcrumSec claims Manchester Airports hack, theft of 86 GB of data

The Manchester Airports Group data breach has been claimed by extortion group FulcrumSec, which told BleepingComputer that it stole approximately 86 GB of data. Samples reviewed by BleepingComputer contained information consistent with MAG’s disclosure while indicating that the breach exposed considerably more detailed customer, booking, and travel information than initially revealed. Manchester Airports Group (MAG),

FulcrumSec claims Manchester Airports hack, theft of 86 GB of data Read More »